Part 1: Check Roles in SAP System and Import Roles from SAP system to Portal.
Go to PFCG
Type desired Roles
Part 2: Upload Roles in SAP Portal
In portal go to System Administrator à Role Upload
Type Role name and “Search”
Check and Add
Check and “Next”
Check “Convert Roles to woksets”
Click “Activate Auto Refresh”
Part 3: Modify Roles and its Settings
In portal go to “Content Administrator, then Portal Content
Again Click Portal Content
Create desired folders
Add roles here
Double click on “myJob”
Go to properties and change your desired entries according to requirement.
Part 4: Check roles have been imported properly in portal
Check roles have been imported properly in portal or not
Create portal roles in the portal using the following options:
- Download business packages from the SAP Developer Network (SDN) .
- Create roles and worksets .
- Manual double maintenance: Part of the roles is maintained as ABAP roles in the ABAP system and part of the roles as portal roles in the portal. This is useful, for example, if you already have a CUA that is functioning well and a sophisticated authorization system to which a portal is to be added.
- Import the ABAP roles from the ABAP systems (by Structure linkUploading Roles from ABAP-Based Systems).
- When you do so:
- The existing ABAP roles (single and composite roles) are automatically converted into portal roles or worksets
- MiniApps are converted into non-Java iViews
- Transactions, BW queries, Crystal Reports, URLs, and so on are converted to iViews
- Optionally, user-role assignments are generated (if the usernames are identical and portal roles have been generated)
- In this way, you obtain a functioning portal application and can use the ABAP authorizations that were defined on the basis of the ABAP roles that originally existed.
- However, you need to manually generate the pages with generated iViews and derived ABAP roles are not migrated. The portal content is also less attractive, for example, due to generated entry points.
- Distribute the portal roles from the portal to the ABAP development systems (see Structure link role and User Distribution to the SAP System).
- A regular synchronization is planned later so that all changes to the portal role are transferred to the ABAP role.
- You can also distribute the role assignment in this way. The assignment of the user to an ABAP role is generated from the assignment of the user to a portal role or to a UME group.
- Caution: The WP3R is not provided with data during the role upload.
- Single roles in ABAP systems based on portal roles:
- A dedicated iView allows the transfer of a portal role into a (logical) ABAP system. This is not normally the same ABAP system in which the ABAP role is later used productively.
- All iViews of the portal role that relates to a specific ABAP system are converted into a single role.
- Delta links ensure that only the iViews that a user can see are transferred.
- In the ABAP system, all iViews are displayed as transactions or services in a list in the menu.
- The administrators of the ABAP system add the single role authorization data and create derived roles, if necessary, based on the generated single roles, which contain specific authorization data.
- The ABAP roles are then transported from the development system into the production ABAP system.
Note: If you change or add portal roles, you must replicate these in the ABAP systems again.
Please let me know if you find any difficulty in importing roles.
Click on the links below to read the following blog posts: